diff --git a/lib/modules/platform/azure/readme.md b/lib/modules/platform/azure/readme.md
index 36cfbdb61ac461..8448600de30732 100644
--- a/lib/modules/platform/azure/readme.md
+++ b/lib/modules/platform/azure/readme.md
@@ -9,6 +9,13 @@ Let Renovate use your PAT by doing _one_ of the following:
 - Set your PAT as an environment variable `RENOVATE_TOKEN`
 - Set your PAT when you run Renovate in the CLI with `--token=`
 
+Permissions for your PAT should be at minimum:
+
+| Scope        | Permission   | Description                       |
+| ------------ | ------------ | --------------------------------- |
+| `Code`       | Read & Write | Required                          |
+| `Work Items` | Read & write | Only needed for link to work item |
+
 Remember to set `platform=azure` somewhere in your Renovate config file.
 
 ## Features awaiting implementation